‼ CVE-2022-26857 ‼
📖 Read
via "National Vulnerability Database".
Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass blocked functionalities and perform unauthorized actions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1261 ‼
📖 Read
via "National Vulnerability Database".
Matrikon, a subsidary of Honeywell Matrikon OPC Server (all versions) is vulnerable to a condition where a low privileged user allowed to connect to the OPC server to use the functions of the IPersisFile to execute operating system processes with system-level privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30476 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request.📖 Read
via "National Vulnerability Database".
🕴 Twitter Fined $150M for Security Data Misuse 🕴
📖 Read
via "Dark Reading".
Twitter is charged with using emails and phone numbers ostensibly collected for account security to sell targeted ads.📖 Read
via "Dark Reading".
Dark Reading
Twitter Fined $150M for Security Data Misuse
Twitter is charged with using emails and phone numbers ostensibly collected for account security to sell targeted ads.
‼ CVE-2022-26727 ‼
📖 Read
via "National Vulnerability Database".
This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. A malicious application may be able to modify protected parts of the file system.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26736 ‼
📖 Read
via "National Vulnerability Database".
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26701 ‼
📖 Read
via "National Vulnerability Database".
A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30508 ‼
📖 Read
via "National Vulnerability Database".
DedeCMS v5.7.93 was discovered to contain arbitrary file deletion vulnerability in upload.php via the delete parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26722 ‼
📖 Read
via "National Vulnerability Database".
A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to gain root privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22616 ‼
📖 Read
via "National Vulnerability Database".
This issue was addressed with improved checks. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26714 ‼
📖 Read
via "National Vulnerability Database".
A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22674 ‼
📖 Read
via "National Vulnerability Database".
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31265 ‼
📖 Read
via "National Vulnerability Database".
The replay feature in the client in Wargaming World of Warships 0.11.4 allows remote attackers to execute code when a user launches a replay from an untrusted source.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26697 ‼
📖 Read
via "National Vulnerability Database".
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26702 ‼
📖 Read
via "National Vulnerability Database".
A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26693 ‼
📖 Read
via "National Vulnerability Database".
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. A plug-in may be able to inherit the application's permissions and access user data.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22663 ‼
📖 Read
via "National Vulnerability Database".
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-004 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.6. A malicious application may bypass Gatekeeper checks.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26728 ‼
📖 Read
via "National Vulnerability Database".
This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to access restricted files.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26694 ‼
📖 Read
via "National Vulnerability Database".
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. A plug-in may be able to inherit the application's permissions and access user data.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26688 ‼
📖 Read
via "National Vulnerability Database".
An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents of system files.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22673 ‼
📖 Read
via "National Vulnerability Database".
This issue was addressed with improved checks. This issue is fixed in iOS 15.5 and iPadOS 15.5. Processing a large input may lead to a denial of service.📖 Read
via "National Vulnerability Database".